Security Incident · ETH Ecosystem
Aquifer Smart Contract Vulnerability: $2.50M Reported Loss
Solana-based proprietary AMM Aquifer was exploited for about $2.5 million.
- Reported loss
- $ 2,500,000
- Attack category
- Smart Contract Vulnerability
Incident Overview
Public reporting points to compromised protocol-linked wallets or admin credentials rather than a confirmed smart-contract bug. The attacker operated addresses on both Solana and Ethereum. The same day, Aquifer’s Solana upgrade authority posted an on-chain white-hat offer: return at least 80% of stolen assets by September 3, 2026, 14:00 UTC to designated recovery addresses, and keep up to 20% as a bounty, in exchange for no civil claims by the project.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.